All VectorsVector nameUser Created Type Likes 19 19 19 19Entities allowed before function callshackvertor7/2/2024XSS0 31 31 31 31Characters allowed after malformed entitieshackvertor7/1/2024XSS1 1 1 1Characters allowed to break double quotesp3n7a90n6/30/2024XSS0⚠ Browser differences 16 16 16 6Entities allowed between function callshackvertor6/29/2024XSS0 1 1 1 1JavaScript Scheme starting with https://BinaryScary6/28/2024JS4 50 50 50 50HTML entities that create ASCII characters inside a JavaScript URLhackvertor6/25/2024JS4 2 2 2 2HTML entities before JavaScript URLhackvertor6/25/2024JS0 3 3 3 3HTML entities inside JavaScript URL before colonhackvertor6/25/2024JS0 2 2 2 2HTML entities inside JavaScript URLhackvertor6/25/2024JS0 3 3 3 3Characters that act as array literalshackvertor6/24/2024JS0 2 2 2 2Characters that act as parentheseshackvertor6/24/2024JS0 31 31 31 31Characters allowed after greater than in eventshackvertor6/21/2024XSS0 4 4 4 4Characters that act as new lines in multi line stringshackvertor6/20/2024JS1 1 1 1characters allowed between exclamation mark and greater then InsertScript6/18/2024HTML0 1 1 1 1Characters ignored after backslash with multiline stringhackvertor6/18/2024JS0 25 25 25 25Characters ignored in strings when doing a non strict comparisonhackvertor6/18/2024JS0⚠ Browser differences 312 312 312 314Characters allowed at hostnamed0ge6/11/2024JS1⚠ Browser differences 3 1 3 1Characters allowed at IPv6 but don't change the hostnamed0ge6/10/2024JS1 1 1 1 1Properties that are accessible on locationhackvertor6/7/2024JS0 13 13 13 13Properties are accessible in a sandboxed iframehackvertor6/7/2024JS0Found 253 recordsPage 9 of 13«45678910111213»